How does multi-factor authentication enhance security?

By adding extra verification steps

What does SCAP stand for?

Security Content Automation Protocol

What is device hardening?

Securing devices by reducing vulnerabilities

What does CVSS stand for?

Common Vulnerability Scoring System

studbud

CySA+ Day 6

20 termsStudBud Administration48 plays

Test your knowledge on various aspects of cybersecurity, including testing methods, vulnerabilities, and security measures

Flashcards20 cardsFPractice quizPHost liveL

Questions 20

Answers

1
Why change default settings?
To improve aesthetics
To increase speed
To enhance security
To confuse users
2
Which is a common vulnerability in web applications?
Static analysis
Patch management
Network assessment
SQL injection
3
What is the purpose of Patch Management?
Monitor threats
Reduce attack surface
Identify vulnerabilities
Conduct penetration tests
4
Which tool is used for vulnerability analysis?
Excel
Photoshop
Burp Suite
Microsoft Word
5
How does CVSS aid incident response?
By delaying responses
By providing clear metrics
By eliminating incidents
By complicating processes
6
Which method limits attack spread?
Using default settings
Ignoring vulnerabilities
Network segmentation
Open network access
7
What is fuzz testing?
Network scanning
Social engineering
Static code analysis
Inputting random data
8
How does multi-factor authentication enhance security?
By adding extra verification steps
By requiring one password
By simplifying access
By removing passwords
9
What is the purpose of security awareness training?
Educate about vulnerabilities
Conduct penetration tests
Analyze network traffic
Manage third-party risks
10
What does SCAP stand for?
Systematic Content Automation Protocol
Standardized Compliance Automation Protocol
Security Content Automation Protocol
Security Compliance Automation Protocol
11
How does CVSS help in prioritization?
By random selection
Based on CVSS scores
By team votes
By external audits
12
Which method tests applications during execution?
Static analysis
Penetration testing
Code review
Dynamic analysis
13
What is device hardening?
Changing device colors
Securing devices by reducing vulnerabilities
Adding more features
Making devices faster
14
Who conducts penetration testing?
Security auditors
Compliance officers
Blue team
Red team
15
What does the Attack Vector describe?
How vulnerability is exploited
Exploitation conditions
User interaction required
Impact on confidentiality
16
What is a key benefit of CVSS scores?
They confuse teams
They facilitate communication
They complicate reporting
They ignore stakeholders
17
What is a False Positive?
Detected but non-existent
Undetected but exists
Low severity issue
Critical vulnerability
18
What is the highest CVSS score?
7
5
8
10
19
What does CVSS stand for?
Common Vulnerability Scoring System
Critical Vulnerability Scoring System
Cybersecurity Vulnerability Scoring System
Common Vulnerabilities and Exposures
20
What does secure boot ensure?
Only trusted software loads
No software loading
Faster boot times
More software options

CySA+ Day 6 Flashcards | StudBud